Re: [vserver] Problem reaching public internet from private address inside a VPS

From: Baltasar Cevc <baltasar_at_cevc-topp.de>
Date: Thu 27 Mar 2008 - 17:25:19 GMT
Message-Id: <4888E508-5557-4753-B414-23E7D4CCB4B0@cevc-topp.de>

Hi Victor,

I would try to use the iptables logs to see whether you accidently
filter
some traffic and tcpdump to see whether something goes out and what
comes
in.

Forwarding is not necessary for the VServers as they run in the same
kernel.

What does a ping output?

Baltasar

On 27.03.2008, at 11:02, Víctor Román Archidona wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi again,
>
> I made a typo when I wrote the previous email. The correct
> <path/to/vserver>interfaces/1/ip is:
> ~ /etc/vservers/private/interfaces/1/ip > 172.16.1.10
>
> Thanks for all in advance.
>
> Víctor Román Archidona escribió:
> | Hi,
> |
> | I'm using several VPS on the same machine with multiple public IP
> | addresses. Both host and VPS machines has network conectivity and
> reachs
> | the public Internet via eth0, which has all the public IPs.
> |
> | Now I'm building "private" VPS on 172.16.1.0/24 network segment.
> If I
> | give 172.16.1.1 to HOST and 172.16.1.10 to a private VPS, they
> both can
> | see each other.
> |
> | The problem comes when I try to reach the public internet from the
> | private VPS on the private subnet. I also enabled forwarding and
> | postrouting on the host:
> |
> | echo 1 > /proc/sys/net/ipv4/ip_forward
> | iptables -t nat -A POSTROUTING -s 172.16.1.0/24 ! -d
> 172.16.1.0/24 -j
> | SNAT --to A.B.C.D
> |
> | (being A.B.C.D the public IP address).
> |
> | The VPS has the following interfaces configuration:
> | ~ /etc/vservers/private/interfaces/0/dev > lo
> | ~ /etc/vservers/private/interfaces/0/prefix > 8
> | ~ /etc/vservers/private/interfaces/0/ip > 127.0.0.1
> |
> | ~ /etc/vservers/private/interfaces/1/dev > eth0
> | ~ /etc/vservers/private/interfaces/1/prefix > 24
> | ~ /etc/vservers/private/interfaces/1/ip > 171.16.1.10
> |
> | Can anyone help me or give some hint about why I cannot reach the
> public
> | Internet?
> |
> | Regards,
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkfrcJsACgkQQ/ddYKMfqaDunACffW0qBsFxy2HaT9CEV4ii5+OO
> f94An1icQ0MSNWxY/zhUJTJGWKx9z400
> =N4TR
> -----END PGP SIGNATURE-----
>

((( Baltasar Cevc

) World wide web:
   # http://www.openairkino.net/ (a project for the local youth;
German only)
   # http://technik.juz-kirchheim.de/ (programming and admin projects)
   # http://baltasar.cevc-topp.de/ (private homepage)
) Phone:
   +49 178 691 22 33
)

Received on Thu Mar 27 19:48:52 2008
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 27 Mar 2008 - 19:49:05 GMT by hypermail 2.1.8